General
-
Target
eb1663b21e6050e58b9daaadce02cd04cbc82018cfaf664d6bff162b7c903fc3
-
Size
599KB
-
Sample
220520-3l1wlahbc7
-
MD5
293b6d9a4db13a5defc9389006c96098
-
SHA1
ddd66ca1dbe71fe21a1a9172a73393ecea7a203e
-
SHA256
eb1663b21e6050e58b9daaadce02cd04cbc82018cfaf664d6bff162b7c903fc3
-
SHA512
43633ef31ee8129b25810dfed6dfb99cfc017c4d3231a8e98ffc63689366af33a7cff326d52d7e3b77fb5c828896fc8e6ca05f6fe33ec3f4de74fe94c18e2f02
Malware Config
Targets
-
-
Target
DOCUMENTS pdf.exe
-
Size
783KB
-
MD5
0f22eacae1316be03f6829946306b593
-
SHA1
3a3d3297ae8b1e96bc0fda3502a58d69447a2577
-
SHA256
b6cbbb6a53fb168a24f6a2f4bbf296547e5ece0314e2b9c21d6662af66a3ac4a
-
SHA512
3b74d936eb6faeab8ea2b37aee1bf90ee54e76a0e37f8ba08d2580908cb648d19da89720a51e5475298abfdab969a474f6145157e5b2662767f7a05795ab6e36
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-